Overview
Explore
Expertise
Ecosystem
What's popular
Palo Alto NGFW Foundations Version 11 Lab
The Palo Alto NGFW Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
PAN-OS and EDLs - Everything You Wanted to Know about External Dynamic Lists
External Dynamic Lists (EDLs) in Palo Alto Firewalls dynamically integrate IPs, URLs, and domains into security policies, reducing change requests. They empower SOCs to manage threats without firewall changes. Despite limitations, EDLs enhance security by automating updates and supporting authentication. Implementing EDLs optimizes security posture and streamlines threat management.
Introduction to XQL: Writing Your First Query
Learning a new programming or query language can be daunting, but if you've used the boolean options in a web search engine before, you can master XQL queries in no time. Like with web searches, we start with a hypothesis of our search, add filters to limit our results, and then validate the results that are returned against our hypothesis.
Palo Alto Networks Next-Generation Firewall (NGFW)
Learn the basics about network security and how next-generation firewalls (NGFW) fits in and establish a baseline knowledge to help aid you through the Next-Generation Firewall learning paths. Throughout this learning path you will learn network security, tools and techniques used to help secure your network, and how the NGFW fits into your security requirements. You will have the opportunity to explore these concepts that will help you walk the NGFW learning path with ease and comfort to aid you on your successful journey of learning NGFW! Now let's get started!
ATC+
Palo Alto Networks Next-Generation Firewall (NGFW) Intermediate
Once you've mastered the basics of Palo Alto's NGFW with the fundamentals Learning Path, it's time to continue your education with the intermediate LP. This Learning Path will teach you topics that help get further use out of your NGFW such as SSL Decryption. Once you've configured SSL Decryption, the NGFW will be able to defend your network in new ways, including URL Filtering, Credential Detection, DGA Detection, DNS Sinkholes, and more!
What's new
ATC+
Palo Alto Networks Next-Generation Firewall (NGFW) Intermediate
Once you've mastered the basics of Palo Alto's NGFW with the fundamentals Learning Path, it's time to continue your education with the intermediate LP. This Learning Path will teach you topics that help get further use out of your NGFW such as SSL Decryption. Once you've configured SSL Decryption, the NGFW will be able to defend your network in new ways, including URL Filtering, Credential Detection, DGA Detection, DNS Sinkholes, and more!
Prisma AIRS Series - Part 1: Discovery
AI is spreading faster than most organizations can track it, across apps, APIs, and teams, often without clear visibility or control. This article explores why traditional discovery falls short and how Prisma AIRS approaches AI security as a connected system, starting with Discovery. By building a unified, contextual view of models, data, and interactions; including shadow AI, organizations can finally understand where risk exists and where control is needed. Next, we turn to Assessment; how to test what you've found.
Partner POV | Palo Alto Networks Prisma Browser
Browse Bravely with Palo Alto Networks
ATC+
Palo Alto Cortex XDR Proving Ground Lab
WWT's ATC Palo Alto Cortex XDR Proving Ground Lab provides a consolidated solution built around Cortex XDR, the Palo Alto firewall, Windows endpoints and Windows servers to demonstrate how the Cortex XDR Agent protects against threats. The goal of Cortex XDR is to increase the operational efficiency of the security operations center. Cortex XDR accomplishes this by reducing alerts by combining similar events, stitching together logs from different sources and preventing as many threats as possible early in the attack cycle. Cortex XDR goes beyond the traditional EDR approach of using only endpoint data to identify and respond to threats by applying machine learning across all your enterprise, network, cloud and endpoint data. This approach enables you to quickly find and stop targeted attacks, insider abuse and remediate compromised endpoints. Cortex XDR combines functionality from Endpoint Protection, Endpoint Detection and Response, Network Traffic Analysis and User Behavior Analytics into a single console. This lab consists of servers running common applications that include Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Palo Alto VM-Series firewall, Active Directory, Windows IIS and SQL server, and several Windows 11 workstations. You will access the environment using a Windows-based jump host from which you can browse web consoles and open RDP/SSH sessions.
SSE and SASE Market Scan Workshop
Selecting the right Secure Access Service Edge (SASE) or Security Services Edge (SSE) solution is complex. With a crowded vendor landscape and evolving business requirements, making a confident, informed decision can feel overwhelming. WWT's Market Scan approach cuts through the noise, delivering objective, research-backed insights that align technology to your business priorities and accelerate your path to the right solution.
Nine Days to Exploitation. Two Weeks to Bypass. How Dataminr and Cortex Break the ToolShell Cycle.
Microsoft patched the SharePoint ToolShell vulnerability chain in July 2025. Within nine days it was under active exploitation. Within two weeks, the patches had been bypassed. Eight months later, a third variant was confirmed in the wild. Dataminr flagged the threat before the first CVE was published, giving customers weeks of early visibility that most organizations never had. This post walks through how the attack works, what it means for each team in your organization, and how Dataminr's early warning, combined with Cortex XSOAR, gives the SOC the visibility and prioritization it needs to stay ahead of a threat that won't stay fixed.
Securing Intelligent Transportation Systems: Applying Zero Trust to IoT Infrastructure
Modern highways run on thousands of connected devices—cameras, sensors, and toll systems—creating massive IoT attack surfaces. This article explores how transportation operators can apply Zero Trust principles using platforms like Palo Alto Networks to gain visibility, enforce segmentation, and protect critical infrastructure without disrupting operations.
Palo Alto NGFW Crafting Basic Security Policies Lab
This lab is a part of a larger collection of mini challenges designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's NGFW solution.
World Wide Technology Awarded the Palo Alto Networks 2025 North America Cortex Partner of the Year
WWT recognized for driving measurable security outcomes through Cortex platform expertise
Partner POV | Think You Have Visibility? Think Again.
Traditional SIEMs struggle with visibility, leaving gaps for attackers. Cortex XSIAM leverages rich telemetry and data stitching to provide comprehensive threat detection and response. By unifying endpoint, network, and cloud data, it reduces alert fatigue and enhances security operations, enabling proactive defense against sophisticated threats. Discover transformative security with Cortex.
Partner POV | Securing Every Identity in the Age of AI
Identity has become the primary attack vector in modern enterprises, with machine identities outnumbering human ones. CyberArk's integration with Palo Alto Networks elevates identity security to a core platform, offering continuous, dynamic protection against identity-based breaches. This partnership empowers organizations to innovate securely in the AI-driven era.
Palo Alto NGFW Foundations Version 10 Lab
Palo Alto v10 is end of life. Please take a look at the Palo Alto v11 Foundations Lab.
The Palo Alto NGFW Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
Palo Alto NGFW Foundations Version 11 Lab
The Palo Alto NGFW Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
ATC+
Palo Alto NGFW Intermediate Version 10 Lab
Palo Alto v10 is end of life. Please take a look at the Palo Alto v11 Foundations Lab.
The Palo Alto NGFW Intermediate Lab is a hand-on virtual environment where you'll be able to complete the exercises you see in the Intermediate learning path as well as several new practicals. The Intermediate lab focuses on tasks like SSL Decryption, URL Filtering, and DNS Tunneling. Just like the Foundations lab, the Intermediate lab is built upon the same infrastructure. While there is a guide that you can follow along with, you can also explore the environment and test any configuration you'd like.
Palo Alto Networks Triple Threat
A coordinated ransomware assault is unfolding inside Tricorsa's environment, striking users, AI systems, and web services at once. SAVE deploys your team to unravel each attack chain, trace the adversary's movements, and contain the threat before it spreads further. Identify every malicious action, stop the ongoing intrusion, and restore stability across the enterprise.
How to Optimize Your End-User Computing Environment to Escape the AI Price Increases
Escaping AI‑driven endpoint price increases comes down to smarter, data‑driven decisions across the endpoint estate. Using persona analysis, DEX insights and targeted optimizations, organizations can achieve meaningful gains today while extending device lifecycles and reducing near‑term spend.
The Journey of Cortex XSOAR Playbook: Designing Your First Playbook
Transform your manual firewall upgrade process into a streamlined, automated workflow with Cortex XSOAR. This article guides you through designing a robust playbook for upgrading High Availability firewall pairs, emphasizing architectural decisions, governance integration and validation patterns. Discover how automation reduces errors, enhances efficiency and satisfies compliance requirements.
AI for Security vs Security for AI with Palo Alto Networks
Join WWT and Palo Alto Networks for an insightful discussion about how AI is transforming organizations and reshaping today's cybersecurity landscape. Learn how Palo Alto Networks comprehensive platform approach combined with WWT's ARMOR framework and ATC validation capabilities, helps customers secure every aspect of AI usage from development to deployment and beyond.
Platformizing the AI Decade with Palo Alto Networks
Palo Alto Networks' recent acquisitions signal a structural shift from portfolio integration to true platformization for the AI decade. By securing AI pipelines, embedding identity enforcement, converging observability, and governing autonomous endpoints, the platform aligns to machine-speed risk—positioning enterprises to architect resilient, future-ready security rather than react to disruption.
Stop Stacking Boxes. Start Designing Security.
Back-to-back firewalls were effective 15-20 years ago, but in today's encrypted, identity-driven and rapidly evolving threat landscape, they add cost and complexity without meaningful protection. Modern security replaces duplicated perimeters with platform-integrated NGFW enforcement, segmentation and coordinated prevention—delivering stronger, measurable defense through intelligent design rather than stacked legacy controls.